Analysis
-
max time kernel
87s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
15-02-2023 17:24
General
-
Target
AnkaBotPC_4.0.5/AnkaBotPC/Application/libEGL.dll
-
Size
349KB
-
MD5
8f175c85cd7a0d670855d118a8008e2e
-
SHA1
e645802fe45b27e8b6ac244d143bc39e17342bd1
-
SHA256
9ef06071c0deb115c7b433496b1ffda1c603b502298e4ce714818c67866c6e78
-
SHA512
152fec689f4d886eaed52202213250516c99ddc8019aea1106a2aca4eba6a51f3f9bad8e98bb65bb9293105b10ff5882fa79861ba6b8b4eb6922678c463471f5
-
SSDEEP
6144:fEYlqgyp/a1fn9F3bsyy/0oTv1eqMuQ/4RQpV5+eMHm+Kii:fEYlryp/M3bsyyb7SuQ/WQJhb
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\AnkaBotPC_4.0.5\AnkaBotPC\Application\libEGL.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\AnkaBotPC_4.0.5\AnkaBotPC\Application\libEGL.dll,#12⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3192-132-0x0000000000000000-mapping.dmp